Analysis
-
max time kernel
94s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
15/11/2024, 02:39
General
-
Target
2024-11-15_d91eaa09d02a7af97b31afcfd1729847_cobalt-strike_cobaltstrike_poet-rat_snatch.exe
-
Size
4.9MB
-
MD5
d91eaa09d02a7af97b31afcfd1729847
-
SHA1
70755f442467d2fdd430da0f2d9b9ff912916edd
-
SHA256
48a4c4c363f7cc2694806df6f6964ffa4dff397f4909564fc4b8e5aadc3a9674
-
SHA512
f622e25d8e3aaafa798c11428a42f86e2a9e85df696e4987ba59408002e40293a86a9a381c7c7311b9e29fb37e160d758362a472e3642a739b391a0c5c878385
-
SSDEEP
49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnx:r56utgpPFotBER/mQ32lUr
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-15_d91eaa09d02a7af97b31afcfd1729847_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-15_d91eaa09d02a7af97b31afcfd1729847_cobalt-strike_cobaltstrike_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery